5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152

General

Target
5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152
Size 6.8MB
Sample260825-e2v4aasxet
SHA256 5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152
MD5 a005a03c105e38659a5813d3a18b9f07
SHA1 cbaaf84e7da99889248deba86ee0d2b542ac7f4a
SHA512 ccfd0d6553558975470f05fe83e70125ed956e29de7e23b6bc447569b608cc6181b98fbfa56ee59b1342bfa7e2a1d2069c23c0b7c5fe134ddd60964207799e33
SSDEEP 98304:a0MzkM4uYmA99J6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpV:a0MzYhJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T13066231178C1C432D7A2127249F8FB3A559DA9681B3257DB27E81ABF3F744C24A3252F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152

File Explorer

5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152

.exe 6.8MB

5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152

IMPHASH 3c90a8ba5d36640acb2d8f8bf6d8bdca
SHA256 5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152
MD5 a005a03c105e38659a5813d3a18b9f07
SHA1 cbaaf84e7da99889248deba86ee0d2b542ac7f4a
SHA512 ccfd0d6553558975470f05fe83e70125ed956e29de7e23b6bc447569b608cc6181b98fbfa56ee59b1342bfa7e2a1d2069c23c0b7c5fe134ddd60964207799e33
SSDEEP 98304:a0MzkM4uYmA99J6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpV:a0MzYhJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T13066231178C1C432D7A2127249F8FB3A559DA9681B3257DB27E81ABF3F744C24A3252F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

317224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\src\_LdsCode\sem\sem_inst\bin\Release\sem_2_test2.pdb

kernel32

Sleep FormatMessageW LocalFree SizeofResource FindFirstFileW FindNextFileW RemoveDirectoryW FindClose GetLastError LockResource LoadResource FindResourceW MoveFileExW lstrcmpiW ReadFile WriteFile SetFilePointer CreateFileW CreateFileA CloseHandle GetFileSize VirtualFree VirtualAlloc GetProcAddress GetModuleHandleW GetVersion IsProcessorFeaturePresent GetSystemDirectoryW LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetThreadAffinityMask ReleaseSemaphore InitializeCriticalSection WaitForSingleObject ResumeThread CreateEventW SetEvent ResetEvent CreateSemaphoreW SetEndOfFile WriteConsoleW HeapSize SetStdHandle EncodePointer DecodePointer RaiseException DuplicateHandle WaitForSingleObjectEx GetCurrentProcess SwitchToThread GetCurrentThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindFirstFileExW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW SetFileAttributesW SetFileTime GetTempPathW AreFileApisANSI SetLastError DeviceIoControl CreateDirectoryExW CopyFileW CreateHardLinkW MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared QueryPerformanceCounter QueryPerformanceFrequency TryEnterCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait OutputDebugStringW GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA GetVersionExW VirtualProtect SetProcessAffinityMask InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx WaitForMultipleObjectsEx LoadLibraryW RtlUnwind ExitThread GetModuleHandleExW ExitProcess GetStdHandle GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapFree HeapAlloc GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc SetConsoleCtrlHandler IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlCaptureStackBackTrace

shlwapi

PathRemoveFileSpecW PathFileExistsW

Sharing

General

Malware Config

Signatures

File Explorer

5e9b8ee3461372abc4f5f1de1ce03379a69e0b12eeab9e745e179a158e652152

kernel32

shlwapi

generic